Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
File:                     KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json)
Hash identifier:          qIFgajl8kLVRq56F7Lwc9cXE+IQD/BKIdk2Ukr9LDU8=
Subject key identifier:   B7:48:94:66:C3:88:2F:A3:ED:8E:C9:56:54:09:B1:A3:64:04:79:42
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Certificate issuer:       /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
Manifest number:          01D4
Signing time:             Sun 05 Apr 2026 03:07:41 +0000
Manifest this update:     Sun 05 Apr 2026 03:07:41 +0000
Manifest next update:     Sun 12 Apr 2026 03:07:41 +0000
Files and hashes:         1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: gI4Yxd22EziCvMHrjEl0cnWAW9hMdcxF8liuOLaZsJc=)
                          2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: JE3YkqQWW9mSMDDOp1/CYkJud9Wxp8btHEMRgajpDV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0CAE, serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
        Validity
            Not Before: Apr  5 03:07:41 2026 GMT
            Not After : Apr 12 03:07:41 2026 GMT
        Subject: CN=69d1d1fd-9d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:10:58:70:74:9d:64:b5:2d:e5:da:5a:63:
                    09:02:b4:ff:8f:21:5d:f0:d9:f7:d1:97:1e:87:96:
                    35:23:c3:7f:00:e0:3e:6d:0e:f4:cb:80:18:ae:ce:
                    16:d6:56:7f:6f:cb:84:2e:b4:87:91:ff:3a:34:aa:
                    0b:13:d2:c1:9a:b5:21:63:0c:be:36:f6:d2:5e:31:
                    7f:44:1c:76:f9:89:6b:31:e3:4f:e3:cb:68:f4:33:
                    78:5b:15:6a:ae:85:5d:ff:41:c1:c5:5a:a8:e9:7e:
                    29:b7:aa:77:63:7e:74:ec:f2:d4:b1:00:bf:e1:39:
                    47:03:89:f9:fe:1a:17:a2:2f:9e:27:c7:42:e9:f8:
                    4f:e5:9b:11:b7:f6:5c:19:77:f0:63:67:1b:a2:7a:
                    6d:b7:b4:7e:94:17:c5:a5:11:3e:9c:7c:14:44:e9:
                    11:8d:ed:62:89:4b:cc:7c:80:73:f3:ff:7e:86:55:
                    42:15:c2:a9:56:42:c3:25:2a:09:df:87:ce:25:58:
                    48:66:72:50:54:d8:98:0c:d4:55:80:00:d1:e4:82:
                    e7:89:32:32:15:59:b7:59:59:60:99:09:7d:14:f2:
                    34:61:96:f9:43:ca:b1:2b:9c:a0:f8:da:15:08:46:
                    91:fa:0d:71:7d:01:1f:8c:7b:b4:51:f4:70:7a:2e:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:48:94:66:C3:88:2F:A3:ED:8E:C9:56:54:09:B1:A3:64:04:79:42
            X509v3 Authority Key Identifier:
                keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6b:4b:7e:98:ac:f6:8f:c2:de:84:2e:9a:30:12:9f:e4:55:
         8d:be:42:61:39:f7:09:19:48:48:7f:9c:ce:d0:18:53:1a:4b:
         20:fa:4c:9e:dd:10:08:c1:54:86:87:05:4a:da:f5:49:6f:5a:
         9c:e7:0f:80:91:f2:25:78:a5:1e:bc:a1:6f:65:cb:d8:b6:80:
         33:c3:38:6a:a7:fe:a1:c5:95:d8:5e:51:5d:d9:83:7f:de:08:
         61:28:d3:29:cf:0c:6c:97:08:dd:4b:17:94:f5:f5:39:fb:37:
         5f:32:b0:fe:91:ae:f4:6c:9d:da:13:ac:02:8c:cd:a0:52:b6:
         66:02:60:84:96:56:b1:62:cd:a4:4b:f4:e4:95:1b:05:32:65:
         72:81:c6:bc:ab:7f:dd:c0:41:64:c1:0e:7e:9a:98:07:ef:c1:
         6e:68:33:90:7d:76:69:bd:01:30:f9:59:a6:2f:7b:ac:3d:96:
         e0:79:52:33:40:1e:92:dc:3b:95:45:5d:0f:9c:24:f0:9d:3e:
         de:9d:7b:f8:af:65:be:d8:fb:96:fa:54:ef:cc:e9:10:1c:ba:
         e3:ac:e8:dd:bf:a9:41:53:b2:b8:e0:ff:1b:17:e7:08:aa:f9:
         cd:f7:55:5c:f3:fb:de:61:7d:e8:be:da:fe:10:43:37:ac:3f:
         d2:73:c6:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBDQUUxMTAvBgNVBAUTKDI5ODExRTFEQjA2OEJEQkJBQkZCN0FCNjk1Rjg1ODk4
QkQ2MThDNjkwHhcNMjYwNDA1MDMwNzQxWhcNMjYwNDEyMDMwNzQxWjAYMRYwFAYD
VQQDEw02OWQxZDFmZC05ZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4sQWHB0nWS1LeXaWmMJArT/jyFd8Nn30Zceh5Y1I8N/AOA+bQ70y4AYrs4W
1lZ/b8uELrSHkf86NKoLE9LBmrUhYwy+NvbSXjF/RBx2+YlrMeNP48to9DN4WxVq
roVd/0HBxVqo6X4pt6p3Y3507PLUsQC/4TlHA4n5/hoXoi+eJ8dC6fhP5ZsRt/Zc
GXfwY2cbonptt7R+lBfFpRE+nHwUROkRje1iiUvMfIBz8/9+hlVCFcKpVkLDJSoJ
34fOJVhIZnJQVNiYDNRVgADR5ILniTIyFVm3WVlgmQl9FPI0YZb5Q8qxK5yg+NoV
CEaR+g1xfQEfjHu0UfRwei57AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdIlGbD
iC+j7Y7JVlQJsaNkBHlCMB8GA1UdIwQYMBaAFCmBHh2waL27q/t6tpX4WJi9YYxp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMENBRS83QzY0NEVFNjZB
NzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3ZidXItM3EybGZoWW1MMWhq
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tZRWVIYkJvdmJ1ci0zcTJsZmhZbUwxaGpHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MENBRS83QzY0NEVFNjZBNzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3Zi
dXItM3EybGZoWW1MMWhqR2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASmtLfpis9o/C3oQumjASn+RVjb5CYTn3CRlISH+cztAYUxpLIPpMnt0QCMFU
hocFStr1SW9anOcPgJHyJXilHryhb2XL2LaAM8M4aqf+ocWV2F5RXdmDf94IYSjT
Kc8MbJcI3UsXlPX1Ofs3XzKw/pGu9Gyd2hOsAozNoFK2ZgJghJZWsWLNpEv05JUb
BTJlcoHGvKt/3cBBZMEOfpqYB+/BbmgzkH12ab0BMPlZpi97rD2W4HlSM0Aektw7
lUVdD5wk8J0+3p17+K9lvtj7lvpU78zpEBy646zo3b+pQVOyuOD/GxfnCKr5zfdV
XPP73mF96L7a/hBDN6w/0nPGPg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:05 2026 by rpki-client